ID de Prueba:	1.3.6.1.4.1.25623.1.1.13.2013.322.03
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2013-322-03)
Resumen:	The remote host is missing an update for the 'samba' package(s) announced via the SSA:2013-322-03 advisory.
Descripción:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the SSA:2013-322-03 advisory. Vulnerability Insight: New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/samba-4.1.1-i486-1_slack14.1.txz: Upgraded. This update fixes two security issues: * Samba versions 3.2.0 and above do not check the underlying file or directory ACL when opening an alternate data stream. * In setups which provide ldap(s) and/or https services, the private key for SSL/TLS encryption might be world readable. This typically happens in active directory domain controller setups. For more information, see: [links moved to references] (* Security fix *) Added tdb.h, tdb.pc, and a libtdb.so symlink. Thanks to Matteo Bernardini. +--------------------------+ Affected Software/OS: 'samba' package(s) on Slackware 14.0, Slackware 14.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 4.0 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4475 BugTraq ID: 63646 http://www.securityfocus.com/bid/63646 Debian Security Information: DSA-2812 (Google Search) http://www.debian.org/security/2013/dsa-2812 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html http://security.gentoo.org/glsa/glsa-201502-15.xml RedHat Security Advisories: RHSA-2013:1806 http://rhn.redhat.com/errata/RHSA-2013-1806.html RedHat Security Advisories: RHSA-2014:0009 http://rhn.redhat.com/errata/RHSA-2014-0009.html http://secunia.com/advisories/56508 SuSE Security Announcement: SUSE-SU-2014:0024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html SuSE Security Announcement: openSUSE-SU-2013:1742 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00083.html SuSE Security Announcement: openSUSE-SU-2013:1787 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00115.html SuSE Security Announcement: openSUSE-SU-2013:1790 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00117.html SuSE Security Announcement: openSUSE-SU-2013:1921 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html http://www.ubuntu.com/usn/USN-2054-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-4476
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.